Socket Identified 19 Malicious Chrome and Edge Extensions
Socket’s analysis describes 19 malicious extensions with modular malware that could steal login credentials, sessions and crypto wallet data.
Category Cybersecurity
News about cyberattacks, vulnerabilities, zero-day flaws, ransomware, malware, data breaches, security updates, and IT system protection.
Wiz Recorded Attacks on LiteLLM and Other Publicly Accessible AI Services
Wiz honeypot telemetry showed persistent attempts to exploit AI and MCP services. Researchers also recorded attacks targeting two LiteLLM vulnerabilities for which fixes are available.
Berlin Confirms Extortion Attempt After Administrative Network Attack, Investigating Data Leak Scope
Following a cyber incident in the state administrative network, Berlin confirmed an extortion attempt. The city will not meet the demands, while the investigation has uncovered another data leak.
Qubes OS Addresses QSB-118 Vulnerability That Could Lead to dom0 Takeover
Security bulletin QSB-118 warns of a flaw when transferring a file from dom0 to a malicious qube. Under certain conditions, it allows an arbitrary command to be executed in dom0.
AB 1856: California Legislature Approves Bill With Open-Source Software Exemption
The California Legislature approved AB 1856, which would exempt software distributed with rights to copy, redistribute, and modify it from age-signal requirements. The bill is not yet law.
Australia Charges Two Men Over TeamPCP Software Supply Chain Attacks
The Australian Federal Police and Western Australia Police Force have charged two men as part of an investigation into the TeamPCP campaign. U.S. authorities have also unsealed an indictment against Ruben Ian Thomson.
Core Lightning Confirms Undisclosed Vulnerabilities, Advises Nodes to Update or Go Offline
The Core Lightning team reviewed AI-generated security reports and confirmed real flaws in some of them. Fixes are being prepared under an approximately two-week embargo.
PaperCut NG and MF Vulnerability Is Being Actively Exploited
PaperCut has confirmed customer incidents and the active exploitation of an as-yet-unspecified flaw in PaperCut NG and PaperCut MF. The risk affects all versions.
CISA Adds JFrog Artifactory Vulnerability to Catalog of Actively Exploited Vulnerabilities
On August 27, 2026, CISA added CVE-2026-66384 in JFrog Artifactory to the KEV catalog. Operators of self-hosted instances should verify the version and deploy available fixes.
CISA Adds NetScaler ADC and Gateway Flaw to Actively Exploited List
CISA added CVE-2026-8452 in NetScaler ADC and NetScaler Gateway to its Known Exploited Vulnerabilities catalog. U.S. federal civilian agencies must update the devices by August 29, 2026.